diff options
| author | Baptiste Daroussin <bapt@FreeBSD.org> | 2020-01-29 13:23:59 +0000 |
|---|---|---|
| committer | Baptiste Daroussin <bapt@FreeBSD.org> | 2020-01-29 13:23:59 +0000 |
| commit | 03d4521404d25c2543bc20c4d0270ecc3c79c325 (patch) | |
| tree | 99705c25c0d5f05e80cd646ff4c2d6079459172e | |
| parent | Import the libfetch patch to the bundled libfetch (diff) | |
Document libfetch vulnerability which affects pkg.
| -rw-r--r-- | security/vuxml/vuln.xml | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 585059fe0157..7a260b3aa0bd 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -58,6 +58,34 @@ Notes: * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="2af10639-4299-11ea-aab1-98fa9bfec35a"> + <topic>pkg -- vulnerability in libfetch</topic> + <affects> + <package> + <name>pkg</name> + <range><lt>1.12.0_1</lt></range> + </package> + <package> + <name>pkg-devel</name> + <range><lt>1.12.99_1</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>A programming error allows an attacker who can specify a URL with a username + and/or password components to overflow libfetch(3) buffers.</p> + </body> + </description> + <references> + <freebsdsa>SA-20:01.libfetch</freebsdsa> + <cvename>CVE-2020-7450</cvename> + </references> + <dates> + <discovery>2020-01-28</discovery> + <entry>2020-01-29</entry> + </dates> + </vuln> + <vuln vid="5f0dd349-40a2-11ea-8d8c-005056a311d1"> <topic>samba -- multiple vulnerabilities</topic> <affects> |